Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/862A8BDEBD5E6FED70D10E27AB1049153DE74B8CF495F12FFD454EBAAB4D3518/0/323830333a616364303a3a2f33322d3332203d3e20323734303236.roa
File:                     323830333a616364303a3a2f33322d3332203d3e20323734303236.roa (raw, json)
Hash identifier:          LJz+IT6TQkoH+v/k80NXxKGWlA+SIuIBftmTTuhNIDw=
Subject key identifier:   35:71:15:7E:56:09:4E:F5:A1:B4:EE:73:96:47:5A:19:54:B8:F9:9E
Certificate issuer:       /CN=B5D91E46260E9AEAE95697E1C0815E51DF174137
Certificate serial:       5DC57DB4F0FCA2858441028C424EBBF98BD46E21
Authority key identifier: B5:D9:1E:46:26:0E:9A:EA:E9:56:97:E1:C0:81:5E:51:DF:17:41:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5D91E46260E9AEAE95697E1C0815E51DF174137.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/862A8BDEBD5E6FED70D10E27AB1049153DE74B8CF495F12FFD454EBAAB4D3518/0/323830333a616364303a3a2f33322d3332203d3e20323734303236.roa
Signing time:             Wed 11 Jun 2025 15:45:00 +0000
ROA not before:           Wed 11 Jun 2025 15:40:00 +0000
ROA not after:            Wed 10 Jun 2026 15:45:00 +0000
asID:                     274026
IP address blocks:        2803:acd0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/862A8BDEBD5E6FED70D10E27AB1049153DE74B8CF495F12FFD454EBAAB4D3518/0/B5D91E46260E9AEAE95697E1C0815E51DF174137.crl
                          rsync://repository.lacnic.net/rpki/lacnic/862A8BDEBD5E6FED70D10E27AB1049153DE74B8CF495F12FFD454EBAAB4D3518/0/B5D91E46260E9AEAE95697E1C0815E51DF174137.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5D91E46260E9AEAE95697E1C0815E51DF174137.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:c5:7d:b4:f0:fc:a2:85:84:41:02:8c:42:4e:bb:f9:8b:d4:6e:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D91E46260E9AEAE95697E1C0815E51DF174137
        Validity
            Not Before: Jun 11 15:40:00 2025 GMT
            Not After : Jun 10 15:45:00 2026 GMT
        Subject: CN=3571157E56094EF5A1B4EE7396475A1954B8F99E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:66:12:d4:c5:d2:a3:ef:46:ee:46:c1:56:63:
                    1a:fb:06:6c:75:8b:41:56:fe:24:a9:47:17:82:14:
                    5a:05:df:91:60:5d:d2:08:1d:cd:4a:da:d7:cd:2c:
                    b8:5b:20:39:e9:40:aa:7b:ba:ef:bb:0b:54:e2:40:
                    c0:5b:d4:2a:93:32:6c:57:2f:c4:00:15:54:01:6b:
                    bf:38:d4:bd:54:8c:2b:7b:d5:13:28:d9:a3:26:88:
                    e6:9a:2e:a8:76:cd:5f:c5:f0:3d:41:6a:13:c6:47:
                    eb:c9:de:e4:6c:53:98:2f:17:02:81:78:31:a6:63:
                    24:82:b7:de:b4:f7:58:5d:23:98:e3:0e:a4:a7:59:
                    2c:b9:c6:0b:28:8d:22:12:ba:cf:80:2f:07:99:2e:
                    a3:ea:19:47:86:9e:93:13:c5:e0:99:e8:73:76:24:
                    7f:e6:e7:c8:6d:5f:70:de:d1:1d:cd:4f:4f:4b:41:
                    86:93:0a:b7:23:02:e8:af:c9:58:be:78:9e:6f:14:
                    bf:a4:b8:2f:67:9f:8b:0e:c1:20:4e:ff:72:12:2a:
                    c8:e2:25:18:da:84:04:2c:68:4f:2f:b2:28:f0:10:
                    bf:0b:01:7c:b4:a1:0a:77:9d:64:fb:40:a3:db:d9:
                    9b:6c:61:87:83:b2:f2:31:2a:5e:3c:f9:d5:7c:9e:
                    90:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:71:15:7E:56:09:4E:F5:A1:B4:EE:73:96:47:5A:19:54:B8:F9:9E
            X509v3 Authority Key Identifier:
                keyid:B5:D9:1E:46:26:0E:9A:EA:E9:56:97:E1:C0:81:5E:51:DF:17:41:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/862A8BDEBD5E6FED70D10E27AB1049153DE74B8CF495F12FFD454EBAAB4D3518/0/B5D91E46260E9AEAE95697E1C0815E51DF174137.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5D91E46260E9AEAE95697E1C0815E51DF174137.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/862A8BDEBD5E6FED70D10E27AB1049153DE74B8CF495F12FFD454EBAAB4D3518/0/323830333a616364303a3a2f33322d3332203d3e20323734303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:acd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:2f:73:7e:b9:77:fe:80:3a:1b:0e:7f:71:87:76:1b:bd:78:
         e4:ff:a8:3f:28:ea:69:bf:e6:3e:8d:04:85:b4:f3:f6:fd:5e:
         35:14:43:47:3e:eb:7b:dc:4b:0f:f5:7d:7d:9e:96:e7:77:42:
         a1:47:32:66:32:05:b6:38:a3:72:0b:4e:73:fa:80:01:9a:d7:
         d1:97:61:38:6d:14:04:e8:2d:8c:8f:de:49:89:38:df:55:e1:
         cc:0a:6f:bf:09:61:37:4b:8c:cc:cb:a9:91:f5:94:bc:fb:2f:
         76:8a:33:19:58:83:e1:2b:ad:1b:a4:31:bb:6d:72:7d:e6:27:
         d9:79:0a:b1:89:5f:7a:13:7c:e7:c8:f3:6a:06:de:1d:5b:e7:
         da:bc:ca:55:98:de:14:08:3c:47:56:9f:1b:13:a2:42:60:ca:
         dd:94:ce:0d:16:36:f8:84:a0:4d:82:47:37:10:06:7e:30:11:
         16:2e:06:fc:0c:13:cc:1c:88:03:5a:a6:26:8f:9c:60:cb:5f:
         a9:3b:7f:ea:ac:69:5c:a2:e2:00:e2:17:3f:ff:3b:0a:0c:52:
         28:0c:a9:00:af:76:c5:d8:16:12:e2:b1:80:5c:bf:b9:35:4b:
         e4:be:94:c4:fc:ee:12:7f:9a:45:8b:89:97:61:e3:50:1c:b3:
         ff:ac:8e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:23:17 2025 by rpki-client